MAX_TOTAL_LOCKED_AMOUNT cap is not enforced in the contract
Vulnerability Details
The veRAACToken contract defines a constant MAX_TOTAL_LOCKED_AMOUNT ( 1,000,000,000 = 1 Billion)
that represents the maximum amount of RAAC tokens that can be locked in the veRAACToken contract.
This limit is expected to be enforced in functions lock and increase.
But it is not checked in any of the functions, allowing RAAC tokens locked to potentially exceed the cap.
Impact
The RAAC locked in the veRAAC contract could exceed the cap expected to be set by
MAX_TOTAL_LOCKED_AMOUNT
Recommendations
Enforce the MAX_TOTAL_LOCKED_AMOUNT checks in lock and increasefunctions respectively.
Revert if the newly added tokens exceed this limit.
Lead Judging Commences
`veRAACToken::lock` function doesn't check MAX_TOTAL_LOCKED_AMOUNT
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.